Threats & Vulnerabilities: Page


  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    DOJ charges alleged Anonymous Sudan ringleaders

    Two Sudanese brothers are accused of leading the cybercriminal group that caused significant damage to healthcare organizations as well as other high-profile victims.

    By Arielle Waldman • Oct. 17, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    September a quiet month for ransomware attacks

    Notable ransomware attacks in September involved a Rhode Island public school district, a Texas hospital system, and Kawasaki Motors' European branch.

    By Alexander Culafi • Oct. 17, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft sees drop in ransomware reaching encryption phase

    In its Digital Defense Report 2024, Microsoft observed a significant increase in the number of human-operated ransomware attacks, which often originated from unmanaged devices.

    By Arielle Waldman • Oct. 16, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft: Nation-state activity blurring with cybercrime

    Microsoft's Digital Defense Report 2024 noted that Russia 'outsourced some cyberespionage operations' against Ukraine to otherwise independent cybercrime gangs.

    By Alexander Culafi • Oct. 16, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Experts slam Chinese research on quantum encryption attack

    Researchers at Shanghai University claim to have cracked RSA encryption using D-Wave quantum systems, but infosec experts say the claims are overblown.

    By Rob Wright • Oct. 16, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Zero-day flaw behind Rackspace breach still a mystery

    More than two weeks after threat actors exploited a zero-day vulnerability in a third-party utility to breach Rackspace, the details about the flaw and the utility remain unknown.

    By Arielle Waldman • Oct. 11, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FTC orders Marriott to pay $52M and enhance security practices

    The Federal Trade Commission says an investigation revealed that poor security practices led to three data breaches at Marriott and Starwood hotels between 2014 and 2020.

    By Arielle Waldman • Oct. 10, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    OpenAI details how threat actors are abusing ChatGPT

    While threat actors are using generative AI tools like ChatGPT to run election influence operations and develop malware, OpenAI says the efforts are rarely successful.

    By Alexander Culafi • Oct. 10, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    What is threat intelligence?

    Threat intelligence, also known as cyberthreat intelligence, is information gathered from a range of sources about current or potential attacks against an organization.

    By Paul Kirvan, Ivy Wigmore, Michael Cobb • Oct. 10, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Coalition: Ransomware severity up 68% in first half of 2024

    The cyber insurance carrier examined claims trends for the first half of 2024, which showed policyholders experienced disruptive and increasingly costly ransomware attacks.

    By Arielle Waldman • Oct. 10, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ivanti zero-day vulnerabilities exploited in chained attack

    The new exploit chains targeting Ivanti Cloud Service Application customers are connected to a previously disclosed critical path traversal flaw, CVE-2024-8963.

    By Alexander Culafi • Oct. 9, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    High-severity Qualcomm zero-day vulnerability under attack

    Qualcomm urges customers to patch the memory corruption vulnerability as Google researchers have observed targeted exploitation in the wild against the flaw.

    By Arielle Waldman • Oct. 8, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    American Water discloses breach, utilities unaffected

    American Water says in its 8-K filing that it disconnected and deactivated certain systems in its incident response, though the nature of the cyberattack is unknown.

    By Alexander Culafi • Oct. 7, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    ‘Defunct’ DOJ ransomware task force raises questions, concerns

    A report from the Office of the Inspector General reviewed the U.S. Department of Justice's efforts against ransomware and found its task force was largely ineffective.

    By Arielle Waldman • Oct. 3, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Cryptomining perfctl malware swarms Linux machines

    Aqua Security researchers believe that perfctl malware has infected thousands of Linux machines in the last three to four years and that countless more could be next.

    By Alexander Culafi • Oct. 3, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Law enforcement agencies arrest 4 alleged LockBit members

    Operation Cronos' efforts to disrupt the LockBit ransomware gang continue as authorities announced the arrests of four alleged members, including one developer.

    By Arielle Waldman • Oct. 1, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CUPS vulnerabilities could put Linux systems at risk

    Security researcher Simone Margaritelli discovered vulnerabilities in the Common UNIX Printing System that attackers could exploit during print jobs against Linux systems.

    By Arielle Waldman • Sept. 27, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ransomware Task Force finds 73% attack increase in 2023

    The Institute for Security and Technology's Ransomware Task Force says a shift to big game hunting tactics led to a significant rise in attacks last year.

    By Arielle Waldman • Sept. 26, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    More Ivanti vulnerabilities exploited in the wild

    Three vulnerabilities in Ivanti products have come under attack by unknown threat actors in recent weeks, including two flaws in the company's Cloud Services Appliance.

    By Rob Wright • Sept. 25, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CrowdStrike exec apologizes to Congress, shares updates

    CrowdStrike changed the way it rolls out content updates as a result of the global IT outage caused by a faulty update in July.

    By Makenzie Holland • Sept. 24, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Arkansas City water treatment facility hit by cyberattack

    While disruptions are limited, the attack on the water treatment facility highlights how the critical infrastructure sector remains a popular target for threat actors.

    By Arielle Waldman • Sept. 24, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft warns of Russian election threats, disinformation

    As the 2024 U.S. presidential election nears, Microsoft detailed new influence campaigns, such as fake videos aimed at discrediting Vice President Kamala Harris.

    By Arielle Waldman • Sept. 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FBI disrupts another Chinese state-sponsored botnet

    The FBI said the massive botnet, which included 260,000 connected devices, was developed and operated by a publicly traded Chinese company named Integrity Technology Group.

    By Rob Wright • Sept. 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    What is quishing (QR code phishing)?

    QR code phishing, or 'quishing,' is a social engineering phishing attack that intentionally deceives its recipient into scanning a QR code, redirecting the person to a bogus website.

    By Sam Campanella • Sept. 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Huntress warns of attacks on Foundation Software accounts

    The cybersecurity company observed a brute force attack campaign targeting Foundation customers that did not change default credentials in their accounting software.

    By Arielle Waldman • Sept. 18, 2024